mcp-openstack-ops 3.5.9__tar.gz → 3.6.0__tar.gz

{mcp_openstack_ops-3.5.9 → mcp_openstack_ops-3.6.0}/.env.example

@@ -19,8 +19,9 @@ FASTMCP_TYPE=streamable-http
 FASTMCP_HOST=0.0.0.0
 FASTMCP_PORT=8000
 
-# (Optional) Enable authentication for streamable-http mode
-# Recommended for production environments
+# (Optional) Enable HTTP Bearer token authentication for streamable-http mode.
+# Clients must send Authorization: Bearer <REMOTE_SECRET_KEY> when enabled.
+# Recommended for production; use a strong, unique REMOTE_SECRET_KEY.
 REMOTE_AUTH_ENABLE=false
 REMOTE_SECRET_KEY=your-secure-secret-key-here
 

mcp_openstack_ops-3.6.0/.github/workflows/tests.yml

@@ -0,0 +1,28 @@
+name: Unit tests
+
+on:
+  push:
+    branches: ["main", "feat/73-per-user-connections"]
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          persist-credentials: false
+          fetch-depth: 0
+      - uses: actions/setup-python@v7
+        with:
+          python-version: "3.12.x"
+      - name: Install uv
+        run: pip install uv==0.7.20
+      - name: Install locked test dependencies
+        run: uv sync --locked --extra dev
+      - name: Run unit tests without cloud credentials
+        run: uv run --locked --extra dev python -m pytest -q tests

{mcp_openstack_ops-3.5.9 → mcp_openstack_ops-3.6.0}/.gitignore

@@ -17,4 +17,7 @@ wheels/
 
 .vscode*
 #.github/copilot-instructions.md
-*.swp
+*.swp
+
+# Windows download metadata
+*:Zone.Identifier

mcp_openstack_ops-3.6.0/AGENTS.md

@@ -0,0 +1,42 @@
+# Repository instructions
+
+These instructions supplement the user's global guidelines. They do not authorize
+Git writes, external publication, or changes to existing cloud resources.
+
+## Maintain the CLI-to-tool mapping and validation snapshot
+
+For every improvement or fix, review README.md's **OpenStack CLI vs MCP Tools
+Mapping** section. Keep its summary, tool rows, Status, Notes, and linked evidence
+consistent with the resulting implementation and actual verification.
+
+- Update affected rows whenever tools, actions, parameters, prerequisites,
+  permissions, limitations, or behavior change. Use registered tool names and
+  supported actions; do not advertise missing tools or unimplemented actions.
+- Distinguish implementation from verification. Mark implemented paths without
+  successful live validation as **Live unverified**, with the specific reason.
+  Missing services/APIs, policy denials, failures, and timeouts are not passes.
+  Keep intentional capability limitations and unimplemented actions explicit.
+- Keep **Live tool checks** and **Local unit tests** in separate summary groups.
+  Live classifications count unique tools; unit tests count test cases. Multiple
+  tests for one tool do not increase the unique-tool count. Keep classification
+  totals consistent with the stated inventory and scope.
+- Show unit-test results concisely as `160/160 (100%)`, using the actual results,
+  not this example's values. Account for failures and skipped tests separately
+  when present; do not count skipped tests as passes. Do not treat unit-test
+  success as proof of live service functionality.
+- Run relevant verification after functional changes. Update dates, source
+  revision or working-tree identity, counts, percentages, and evidence links only
+  from checks actually performed. Do not present an older snapshot as validation
+  of newer code. Mark affected paths as unverified or the snapshot as outdated
+  when validation cannot be repeated.
+- Replace a complete live summary only after repeating its stated coverage.
+  Label targeted retests as partial; do not extrapolate them to the full toolset.
+  Document polling limits and distinguish accepted requests from confirmed final
+  resource states. Explain changes in test conditions that affect comparisons.
+- Keep dated reports as historical evidence and link the latest applicable
+  report from README.md. Reports must state verification limits, observed
+  failures, and cleanup results without exposing credentials, private endpoints,
+  or sensitive resource data.
+- Before completion, check summary arithmetic, percentages, tool/action names,
+  Status/Notes, source identity, and evidence links for agreement. If README.ko.md
+  exists, maintain equivalent information in both README files.

{mcp_openstack_ops-3.5.9 → mcp_openstack_ops-3.6.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mcp-openstack-ops
-Version: 3.5.9
+Version: 3.6.0
 Summary: OpenStack operations automation MCP server
 Author-email: JungJungIn <call518@gmail.com>
 Requires-Python: >=3.12
@@ -41,6 +41,11 @@ Dynamic: license-file
 
 ## Features
 
+Experimental per-user remote connections are available for testing with the
+opt-in `--multi-user` mode. See the [phase 1 setup and validation guide](docs/multi-user-phase1.md)
+for authentication, client limitations, and the test checklist. Administrator
+cross-project queries are outside this phase.
+
 - ✅ **Project-Scoped Operations**: Every tool enforces the configured `OS_PROJECT_NAME`, validating resource ownership so actions stay inside a single tenant.
 - ✅ **Safety-Gated Writes**: Modify (`set_*`) tooling only registers when `ALLOW_MODIFY_OPERATIONS=true`, keeping default deployments read-only and auditable.
 - ✅ **90+ Purpose-Built Tools**: Broad coverage across compute, networking, storage, images, identity, Heat, and Octavia load balancing tasks. Project resources are scoped to the active project; cloud-wide administrative APIs remain subject to OpenStack policy.
@@ -178,13 +183,44 @@ New consolidated `get_instance` tool replaces multiple separate tools:
 
 ## 📊 OpenStack CLI vs MCP Tools Mapping
 
-**Detailed Mapping by Category**
-
-✅ indicates an implemented API path, subject to cloud services and policy.
-Live-validated paths and deployment limits are listed in
-[integration validation](docs/integration-validation.md). Also see
+**Validation snapshot — 2026-10-30** (main working tree based on `dd98993`,
+with the uncommitted fixes described in the report):
+
+<table border="1" rules="cols">
+  <thead>
+    <tr><th>Verification type</th><th>Item</th><th>Result</th></tr>
+  </thead>
+  <tbody>
+    <tr><td rowspan="5">Live tool checks</td><td>Registered tools invoked and classified</td><td><strong>105</strong></td></tr>
+    <tr><td>Passed within the exercised live scenarios</td><td><strong>74</strong></td></tr>
+    <tr><td>Implemented, live unverified: service/API unavailable</td><td><strong>28</strong></td></tr>
+    <tr><td>Intentional capability limitations</td><td><strong>3</strong></td></tr>
+    <tr><td>Reproduced code defects / state-check timeouts in the retest</td><td><strong>0 / 0</strong></td></tr>
+    <tr><td>Local unit tests</td><td>Test cases in <code>tests/test_*.py</code></td><td><strong>160/160 (100%)</strong></td></tr>
+  </tbody>
+</table>
+
+State polling allowed 180 seconds; soft reboot completed in 131.66 seconds
+(previously it exceeded the 90-second check). No reboot implementation change
+was needed.
+
+The 10 previously reproduced tool defects were corrected. The 28 unavailable
+paths are **not live-validated successes**: 24 Octavia tools, two Neutron QoS
+tools, one Aodh tool, and one Neutron port-forwarding tool. Each affected table
+row is marked **⚠️ Live unverified**. An absent tool/action is marked **❌ Not
+implemented** rather than presented as an available feature.
+
+✅ means an implemented API path; it does not certify every action or backend.
+The live-pass count covers only the scenarios in the
+[latest retest report](docs/main-live-retest-2026-10-30.md), with
+[sanitized evidence](docs/main-live-retest-2026-10-30.json). API policy, asynchronous
+completion, production HTTPS/client compatibility, load, and guest I/O limits
+are stated there. All test resources were cleaned up; the final audit found zero
+remaining test resources across 24 categories. See also
 [API prerequisites and result semantics](#api-prerequisites-and-result-semantics).
 
+**Detailed Mapping by Category**
+
 ### 1. 🖥️ **Compute (Nova)**
 
 | OpenStack CLI Command | MCP Tool | Status | Notes |
@@ -194,7 +230,7 @@ Live-validated paths and deployment limits are listed in
 | `openstack server create` | `set_instance` (action="create") | ✅ | **ENHANCED** - Bulk creation support |
 | `openstack server start/stop/reboot` | `set_instance` | ✅ | **ENHANCED** - Bulk operations with filtering |
 | `openstack server delete` | `set_instance` (action="delete") | ✅ | **ENHANCED** - Bulk deletion with name_contains filtering |
-| `openstack server backup create` | `set_server_backup` | ✅ | Backup creation with rotation |
+| `openstack server backup create` | `set_server_backup` | ✅ | Nova backup action with rotation; asynchronous, no custom metadata |
 | `openstack server image create` | `set_instance` (action="snapshot") | ✅ | Image/snapshot creation |
 | `openstack server shelve/unshelve` | `set_instance` | ✅ | Instance shelving |
 | `openstack server lock/unlock` | `set_instance` | ✅ | Instance locking |
@@ -226,11 +262,11 @@ Live-validated paths and deployment limits are listed in
 | `openstack server remove volume` | `set_server_volume` (action="detach") | ✅ | Volume detachment |
 | `openstack server set` | `set_server_properties` (action="set") | ✅ | Server property setting |
 | `openstack server unset` | `set_server_properties` (action="unset") | ✅ | Server property unsetting |
-| `openstack server dump create` | `set_server_dump` | ✅ | Server dump creation |
+| `openstack server dump create` | `set_server_dump` | ❌ Unsupported | Returns an explicit unsupported result; no dump is created |
 | `openstack server event list` | `get_server_events` | ✅ | Server event tracking |
 | `openstack server group list` | `get_server_groups` | ✅ | Server group listing |
 | `openstack server group create/delete` | `set_server_group` | ✅ | Server group management |
-| `openstack flavor list` | `get_flavor_list` (via cluster_status) | ✅ | Flavor listing |
+| `openstack flavor list` | `set_flavor` (action="list") | ✅ | Requires modification tools to be enabled for registration |
 | `openstack flavor create/delete` | `set_flavor` | ✅ | Flavor management |
 | `openstack keypair list` | `get_keypair_list` | ✅ | Keypair listing |
 | `openstack keypair create/delete` | `set_keypair` | ✅ | Keypair management |
@@ -257,17 +293,17 @@ Live-validated paths and deployment limits are listed in
 | `openstack floating ip show` | `set_floating_ip` (action="show") | ✅ | Floating IP details |
 | `openstack floating ip unset` | `set_floating_ip` (action="unset") | ✅ | Floating IP property clearing |
 | `openstack floating ip pool list` | `get_floating_ip_pools` | ✅ | Floating IP pool listing |
-| `openstack floating ip port forwarding create` | `set_floating_ip_port_forwarding` (action="create") | ✅ | Port forwarding creation |
-| `openstack floating ip port forwarding delete` | `set_floating_ip_port_forwarding` (action="delete") | ✅ | Port forwarding deletion |
-| `openstack floating ip port forwarding list` | `set_floating_ip_port_forwarding` (action="list") | ✅ | Port forwarding listing |
-| `openstack floating ip port forwarding set` | `set_floating_ip_port_forwarding` (action="set") | ✅ | Port forwarding updates |
-| `openstack floating ip port forwarding show` | `set_floating_ip_port_forwarding` (action="show") | ✅ | Port forwarding details |
+| `openstack floating ip port forwarding create` | `set_floating_ip_port_forwarding` (action="create") | ⚠️ Live unverified | Implemented; test platform port-forwarding endpoint returns HTTP 404 |
+| `openstack floating ip port forwarding delete` | `set_floating_ip_port_forwarding` (action="delete") | ⚠️ Live unverified | Implemented; test platform port-forwarding endpoint returns HTTP 404 |
+| `openstack floating ip port forwarding list` | `set_floating_ip_port_forwarding` (action="list") | ⚠️ Live unverified | Implemented; test platform port-forwarding endpoint returns HTTP 404 |
+| `openstack floating ip port forwarding set` | `set_floating_ip_port_forwarding` (action="set") | ⚠️ Live unverified | Implemented; test platform port-forwarding endpoint returns HTTP 404 |
+| `openstack floating ip port forwarding show` | `set_floating_ip_port_forwarding` (action="show") | ⚠️ Live unverified | Implemented; test platform port-forwarding endpoint returns HTTP 404 |
 | `openstack security group list` | `get_security_groups` | ✅ | Security group listing |
 | `openstack security group create/delete` | `set_security_groups` | ✅ | Project-owned security groups |
 | `openstack port list` | `get_network_details` (includes ports) | ✅ | Port information included |
 | `openstack port create/delete` | `set_network_ports` | ✅ | Port management |
-| `openstack network qos policy list` | `get_network_qos_policies` | ✅ | Current-project policy containers |
-| `openstack network qos policy create` | `set_network_qos_policies` | ✅ | Create/list/delete policy containers; does not create bandwidth rules |
+| `openstack network qos policy list` | `get_network_qos_policies` | ⚠️ Live unverified | Implemented; test platform QoS endpoint returns HTTP 404 |
+| `openstack network qos policy create` | `set_network_qos_policies` | ⚠️ Live unverified | Implemented; test platform QoS endpoint returns HTTP 404. Policy containers only; no bandwidth rules |
 | `openstack network agent list` | `get_service_status` (includes agents) | ✅ | Network agents |
 | `openstack network agent set` | `set_network_agents` | ✅ | Enable/disable cloud-wide agents; usually admin-only |
 
@@ -349,95 +385,95 @@ Live-validated paths and deployment limits are listed in
 
 | OpenStack CLI Command | MCP Tool | Status | Notes |
 |---------------------|---------|------|------|
-| `openstack loadbalancer list` | `get_load_balancer_status` | ✅ | Load balancer listing with pagination |
-| `openstack loadbalancer show` | `get_load_balancer_status` | ✅ | Load balancer detailed information |
-| `openstack loadbalancer create` | `set_load_balancer` (action="create") | ✅ | Load balancer creation |
-| `openstack loadbalancer delete` | `set_load_balancer` (action="delete") | ✅ | Load balancer deletion |
-| `openstack loadbalancer set` | `set_load_balancer` (action="update") | ✅ | Load balancer property update |
-| `openstack loadbalancer stats show` | `get_load_balancer_status` | ✅ | Load balancer statistics |
-| `openstack loadbalancer status show` | `get_load_balancer_status` | ✅ | Load balancer status tree |
-| `openstack loadbalancer failover` | `set_load_balancer` (action="failover") | ✅ | Load balancer failover |
-| `openstack loadbalancer unset` | `set_load_balancer` (action="unset") | ✅ | Load balancer property unset |
+| `openstack loadbalancer list` | `get_load_balancer_list` | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Load balancer listing with pagination |
+| `openstack loadbalancer show` | `get_load_balancer_details` | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Load balancer detailed information |
+| `openstack loadbalancer create` | `set_load_balancer` (action="create") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Load balancer creation |
+| `openstack loadbalancer delete` | `set_load_balancer` (action="delete") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Load balancer deletion |
+| `openstack loadbalancer set` | `set_load_balancer` (action="update") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Load balancer property update |
+| `openstack loadbalancer stats show` | `set_load_balancer` (action="stats") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Load balancer statistics |
+| `openstack loadbalancer status show` | `set_load_balancer` (action="status") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Load balancer status tree |
+| `openstack loadbalancer failover` | `set_load_balancer` (action="failover") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Load balancer failover |
+| `openstack loadbalancer unset` | `set_load_balancer` (action="unset") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Load balancer property unset |
 | **Listener Management** | | | |
-| `openstack loadbalancer listener list` | `get_load_balancer_listeners` | ✅ | Listener listing for load balancer |
-| `openstack loadbalancer listener create` | `set_load_balancer_listener` (action="create") | ✅ | Listener creation (HTTP/HTTPS/TCP/UDP) |
-| `openstack loadbalancer listener delete` | `set_load_balancer_listener` (action="delete") | ✅ | Listener deletion |
-| `openstack loadbalancer listener show` | `get_load_balancer_listeners` | ✅ | Listener detailed information |
-| `openstack loadbalancer listener set` | `set_load_balancer_listener` (action="update") | ✅ | Listener property update |
-| `openstack loadbalancer listener stats show` | `get_load_balancer_listeners` | ✅ | Listener statistics |
-| `openstack loadbalancer listener unset` | `set_load_balancer_listener` (action="unset") | ✅ | Listener property unset |
+| `openstack loadbalancer listener list` | `get_load_balancer_listeners` | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Listener listing for load balancer |
+| `openstack loadbalancer listener create` | `set_load_balancer_listener` (action="create") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Listener creation (HTTP/HTTPS/TCP/UDP) |
+| `openstack loadbalancer listener delete` | `set_load_balancer_listener` (action="delete") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Listener deletion |
+| `openstack loadbalancer listener show` | `get_load_balancer_listeners` | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Listener detailed information |
+| `openstack loadbalancer listener set` | `set_load_balancer_listener` (action="update") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Listener property update |
+| `openstack loadbalancer listener stats show` | `set_load_balancer_listener` (action="stats") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Listener statistics |
+| `openstack loadbalancer listener unset` | `set_load_balancer_listener` (action="unset") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Listener property unset |
 | **Pool Management** | | | |
-| `openstack loadbalancer pool list` | `get_load_balancer_pools` | ✅ | Pool listing (all or by listener) |
-| `openstack loadbalancer pool create` | `set_load_balancer_pool` (action="create") | ✅ | Pool creation with algorithms |
-| `openstack loadbalancer pool delete` | `set_load_balancer_pool` (action="delete") | ✅ | Pool deletion |
-| `openstack loadbalancer pool set` | `set_load_balancer_pool` (action="update") | ✅ | Pool property update |
-| `openstack loadbalancer pool show` | `get_load_balancer_pools` | ✅ | Pool detailed information |
-| `openstack loadbalancer pool stats show` | `get_load_balancer_pools` | ✅ | Pool statistics |
-| `openstack loadbalancer pool unset` | `set_load_balancer_pool` (action="unset") | ✅ | Pool property unset |
+| `openstack loadbalancer pool list` | `get_load_balancer_pools` | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Pool listing (all or by listener) |
+| `openstack loadbalancer pool create` | `set_load_balancer_pool` (action="create") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Pool creation with algorithms |
+| `openstack loadbalancer pool delete` | `set_load_balancer_pool` (action="delete") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Pool deletion |
+| `openstack loadbalancer pool set` | `set_load_balancer_pool` (action="set") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Pool property update |
+| `openstack loadbalancer pool show` | `get_load_balancer_pools` | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Pool detailed information |
+| `openstack loadbalancer pool stats show` | N/A | ❌ Not implemented | No registered tool/action for this CLI operation |
+| `openstack loadbalancer pool unset` | N/A | ❌ Not implemented | No registered tool/action for this CLI operation |
 | **Member Management** | | | |
-| `openstack loadbalancer member list` | `get_load_balancer_members` | ✅ | Pool member listing |
-| `openstack loadbalancer member create` | `set_load_balancer_member` (action="create") | ✅ | Pool member creation |
-| `openstack loadbalancer member delete` | `set_load_balancer_member` (action="delete") | ✅ | Pool member deletion |
-| `openstack loadbalancer member set` | `set_load_balancer_member` (action="update") | ✅ | Pool member property update |
-| `openstack loadbalancer member show` | `get_load_balancer_members` | ✅ | Pool member detailed information |
-| `openstack loadbalancer member unset` | `set_load_balancer_member` (action="unset") | ✅ | Pool member property unset |
+| `openstack loadbalancer member list` | `get_load_balancer_pool_members` | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Pool member listing |
+| `openstack loadbalancer member create` | `set_load_balancer_pool_member` (action="create") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Pool member creation |
+| `openstack loadbalancer member delete` | `set_load_balancer_pool_member` (action="delete") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Pool member deletion |
+| `openstack loadbalancer member set` | `set_load_balancer_pool_member` (action="set") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Pool member property update |
+| `openstack loadbalancer member show` | `get_load_balancer_pool_members` | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Pool member detailed information |
+| `openstack loadbalancer member unset` | N/A | ❌ Not implemented | No registered tool/action for this CLI operation |
 | **Health Monitor Management** | | | |
-| `openstack loadbalancer healthmonitor list` | `get_load_balancer_health_monitors` | ✅ | Health monitor listing |
-| `openstack loadbalancer healthmonitor create` | `set_load_balancer_health_monitor` (action="create") | ✅ | Health monitor creation |
-| `openstack loadbalancer healthmonitor delete` | `set_load_balancer_health_monitor` (action="delete") | ✅ | Health monitor deletion |
-| `openstack loadbalancer healthmonitor set` | `set_load_balancer_health_monitor` (action="update") | ✅ | Health monitor update |
-| `openstack loadbalancer healthmonitor show` | `get_load_balancer_health_monitors` | ✅ | Health monitor detailed information |
-| `openstack loadbalancer healthmonitor unset` | `set_load_balancer_health_monitor` (action="unset") | ✅ | Health monitor property unset |
+| `openstack loadbalancer healthmonitor list` | `get_load_balancer_health_monitors` | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Health monitor listing |
+| `openstack loadbalancer healthmonitor create` | `set_load_balancer_health_monitor` (action="create") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Health monitor creation |
+| `openstack loadbalancer healthmonitor delete` | `set_load_balancer_health_monitor` (action="delete") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Health monitor deletion |
+| `openstack loadbalancer healthmonitor set` | `set_load_balancer_health_monitor` (action="set") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Health monitor update |
+| `openstack loadbalancer healthmonitor show` | `get_load_balancer_health_monitors` | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Health monitor detailed information |
+| `openstack loadbalancer healthmonitor unset` | N/A | ❌ Not implemented | No registered tool/action for this CLI operation |
 | **L7 Policy Management** | | | |
-| `openstack loadbalancer l7policy list` | `get_load_balancer_l7_policies` | ✅ | L7 policy listing |
-| `openstack loadbalancer l7policy create` | `set_load_balancer_l7_policy` (action="create") | ✅ | L7 policy creation |
-| `openstack loadbalancer l7policy delete` | `set_load_balancer_l7_policy` (action="delete") | ✅ | L7 policy deletion |
-| `openstack loadbalancer l7policy set` | `set_load_balancer_l7_policy` (action="update") | ✅ | L7 policy update |
-| `openstack loadbalancer l7policy show` | `get_load_balancer_l7_policies` | ✅ | L7 policy details |
-| `openstack loadbalancer l7policy unset` | `set_load_balancer_l7_policy` (action="unset") | ✅ | L7 policy property unset |
+| `openstack loadbalancer l7policy list` | `get_load_balancer_l7_policies` | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. L7 policy listing |
+| `openstack loadbalancer l7policy create` | `set_load_balancer_l7_policy` (action="create") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. L7 policy creation |
+| `openstack loadbalancer l7policy delete` | `set_load_balancer_l7_policy` (action="delete") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. L7 policy deletion |
+| `openstack loadbalancer l7policy set` | N/A | ❌ Not implemented | No registered tool/action for this CLI operation |
+| `openstack loadbalancer l7policy show` | `get_load_balancer_l7_policies` | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. L7 policy details |
+| `openstack loadbalancer l7policy unset` | N/A | ❌ Not implemented | No registered tool/action for this CLI operation |
 | **L7 Rule Management** 🆕 | | | |
-| `openstack loadbalancer l7rule list` | `get_load_balancer_l7_rules` | ✅ | L7 rule listing |
-| `openstack loadbalancer l7rule create` | `set_load_balancer_l7_rule` (action="create") | ✅ | L7 rule creation |
-| `openstack loadbalancer l7rule delete` | `set_load_balancer_l7_rule` (action="delete") | ✅ | L7 rule deletion |
-| `openstack loadbalancer l7rule set` | `set_load_balancer_l7_rule` (action="update") | ✅ | L7 rule update |
-| `openstack loadbalancer l7rule show` | `get_load_balancer_l7_rules` | ✅ | L7 rule details |
-| `openstack loadbalancer l7rule unset` | `set_load_balancer_l7_rule` (action="unset") | ✅ | L7 rule property unset |
+| `openstack loadbalancer l7rule list` | `get_load_balancer_l7_rules` | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. L7 rule listing |
+| `openstack loadbalancer l7rule create` | `set_load_balancer_l7_rule` (action="create") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. L7 rule creation |
+| `openstack loadbalancer l7rule delete` | `set_load_balancer_l7_rule` (action="delete") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. L7 rule deletion |
+| `openstack loadbalancer l7rule set` | N/A | ❌ Not implemented | No registered tool/action for this CLI operation |
+| `openstack loadbalancer l7rule show` | `get_load_balancer_l7_rules` | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. L7 rule details |
+| `openstack loadbalancer l7rule unset` | N/A | ❌ Not implemented | No registered tool/action for this CLI operation |
 | **Amphora Management** 🆕 | | | |
-| `openstack loadbalancer amphora list` | `get_load_balancer_amphorae` | ✅ | Amphora listing |
-| `openstack loadbalancer amphora show` | `set_load_balancer_amphora` (action="show") | ✅ | Amphora details |
-| `openstack loadbalancer amphora configure` | `set_load_balancer_amphora` (action="configure") | ✅ | Amphora configuration |
-| `openstack loadbalancer amphora failover` | `set_load_balancer_amphora` (action="failover") | ✅ | Amphora failover |
+| `openstack loadbalancer amphora list` | `get_load_balancer_amphorae` | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Amphora listing |
+| `openstack loadbalancer amphora show` | `set_load_balancer_amphora` (action="show") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Amphora details |
+| `openstack loadbalancer amphora configure` | `set_load_balancer_amphora` (action="configure") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Amphora configuration |
+| `openstack loadbalancer amphora failover` | `set_load_balancer_amphora` (action="failover") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Amphora failover |
 | `openstack loadbalancer amphora delete` | N/A | ❌ | Not supported by OpenStack SDK |
 | `openstack loadbalancer amphora stats show` | N/A | ❌ | Not supported by OpenStack SDK |
 | **Provider Management** | | | |
-| `openstack loadbalancer provider list` | `get_load_balancer_providers` | ✅ | Provider listing |
-| `openstack loadbalancer provider capability list` | `get_load_balancer_providers` | ✅ | Provider capability listing |
+| `openstack loadbalancer provider list` | `get_load_balancer_providers` | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Provider listing |
+| `openstack loadbalancer provider capability list` | N/A | ❌ Not implemented | No registered tool/action for this CLI operation |
 | **Availability Zone Management** 🆕 | | | |
-| `openstack loadbalancer availabilityzone list` | `get_load_balancer_availability_zones` | ✅ | Availability zone listing |
-| `openstack loadbalancer availabilityzone show` | `get_load_balancer_availability_zones` | ✅ | Availability zone details |
-| `openstack loadbalancer availabilityzone create` | `set_load_balancer_availability_zone` (action="create") | ✅ | Availability zone creation |
-| `openstack loadbalancer availabilityzone delete` | `set_load_balancer_availability_zone` (action="delete") | ✅ | Availability zone deletion |
-| `openstack loadbalancer availabilityzone set` | `set_load_balancer_availability_zone` (action="update") | ✅ | Availability zone update |
-| `openstack loadbalancer availabilityzone unset` | `set_load_balancer_availability_zone` (action="unset") | ✅ | Availability zone property unset |
+| `openstack loadbalancer availabilityzone list` | `get_load_balancer_availability_zones` | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Availability zone listing |
+| `openstack loadbalancer availabilityzone show` | `get_load_balancer_availability_zones` | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Availability zone details |
+| `openstack loadbalancer availabilityzone create` | `set_load_balancer_availability_zone` (action="create") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Availability zone creation |
+| `openstack loadbalancer availabilityzone delete` | `set_load_balancer_availability_zone` (action="delete") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Availability zone deletion |
+| `openstack loadbalancer availabilityzone set` | N/A | ❌ Not implemented | No registered tool/action for this CLI operation |
+| `openstack loadbalancer availabilityzone unset` | N/A | ❌ Not implemented | No registered tool/action for this CLI operation |
 | **Flavor Management** 🆕 | | | |
-| `openstack loadbalancer flavor list` | `get_load_balancer_flavors` | ✅ | Flavor listing |
-| `openstack loadbalancer flavor show` | `get_load_balancer_flavors` | ✅ | Flavor details |
-| `openstack loadbalancer flavor create` | `set_load_balancer_flavor` (action="create") | ✅ | Flavor creation |
-| `openstack loadbalancer flavor delete` | `set_load_balancer_flavor` (action="delete") | ✅ | Flavor deletion |
-| `openstack loadbalancer flavor set` | `set_load_balancer_flavor` (action="update") | ✅ | Flavor update |
-| `openstack loadbalancer flavor unset` | `set_load_balancer_flavor` (action="unset") | ✅ | Flavor property unset |
+| `openstack loadbalancer flavor list` | `get_load_balancer_flavors` | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Flavor listing |
+| `openstack loadbalancer flavor show` | `get_load_balancer_flavors` | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Flavor details |
+| `openstack loadbalancer flavor create` | `set_load_balancer_flavor` (action="create") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Flavor creation |
+| `openstack loadbalancer flavor delete` | `set_load_balancer_flavor` (action="delete") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Flavor deletion |
+| `openstack loadbalancer flavor set` | N/A | ❌ Not implemented | No registered tool/action for this CLI operation |
+| `openstack loadbalancer flavor unset` | N/A | ❌ Not implemented | No registered tool/action for this CLI operation |
 | **Flavor Profile Management** | | | |
-| `openstack loadbalancer flavorprofile list` | `get_load_balancer_flavor_profiles` | ✅ | Flavor profile listing |
-| `openstack loadbalancer flavorprofile show` | `get_load_balancer_flavor_profiles` | ✅ | Flavor profile details |
-| `openstack loadbalancer flavorprofile create` | `set_load_balancer_flavor_profile` (action="create") | ✅ | Flavor profile creation |
-| `openstack loadbalancer flavorprofile set` | `set_load_balancer_flavor_profile` (action="update") | ✅ | Flavor profile update |
-| `openstack loadbalancer flavorprofile unset` | `set_load_balancer_flavor_profile` (action="unset") | ✅ | Flavor profile property unset |
-| `openstack loadbalancer flavorprofile delete` | `set_load_balancer_flavor_profile` (action="delete") | 🚧 | Pending implementation |
+| `openstack loadbalancer flavorprofile list` | N/A | ❌ Not implemented | No registered tool/action for this CLI operation |
+| `openstack loadbalancer flavorprofile show` | N/A | ❌ Not implemented | No registered tool/action for this CLI operation |
+| `openstack loadbalancer flavorprofile create` | N/A | ❌ Not implemented | No registered tool/action for this CLI operation |
+| `openstack loadbalancer flavorprofile set` | N/A | ❌ Not implemented | No registered tool/action for this CLI operation |
+| `openstack loadbalancer flavorprofile unset` | N/A | ❌ Not implemented | No registered tool/action for this CLI operation |
+| `openstack loadbalancer flavorprofile delete` | N/A | ❌ Not implemented | No registered tool/action for this CLI operation |
 | **Quota Management** 🆕 | | | |
-| `openstack loadbalancer quota list` | `get_load_balancer_quotas` | ✅ | Quota listing |
-| `openstack loadbalancer quota show` | `get_load_balancer_quotas` | ✅ | Quota details |
-| `openstack loadbalancer quota set` | `set_load_balancer_quota` (action="set") | ✅ | Quota setting |
-| `openstack loadbalancer quota reset` | `set_load_balancer_quota` (action="reset") | ✅ | Quota reset |
+| `openstack loadbalancer quota list` | `get_load_balancer_quotas` | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Quota listing |
+| `openstack loadbalancer quota show` | `get_load_balancer_quotas` | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Quota details |
+| `openstack loadbalancer quota set` | `set_load_balancer_quota` (action="set") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Quota setting |
+| `openstack loadbalancer quota reset` | `set_load_balancer_quota` (action="reset") | ⚠️ Live unverified | Implemented; Octavia unavailable in the test platform. Quota reset |
 
 ### 8. 📊 **Monitoring & Logging**
 
@@ -448,7 +484,7 @@ Live-validated paths and deployment limits are listed in
 | Cluster overview | `get_service_status` + `get_resource_monitoring` | ✅ | Service probes and current inventory |
 | Service log metadata | `set_service_logs` | Partial | Service listing only; log retrieval is unavailable without a logging backend |
 | Resource metadata | `set_metrics` | Partial | list/summary only; telemetry sample retrieval is unavailable |
-| Alarm management | `set_alarms` | ✅ | Real Aodh/Gnocchi resource threshold alarms; requires services and collected metrics |
+| Alarm management | `set_alarms` | ⚠️ Live unverified | Implemented; Aodh/Gnocchi unavailable in the test platform. Requires services and collected metrics |
 | Compute agents | `set_compute_agents` | ✅ | Compute agent management |
 | Usage statistics | `get_usage_statistics` | ✅ | Period compute allocation-hours plus separately labeled current snapshots |
 
@@ -457,7 +493,8 @@ Live-validated paths and deployment limits are listed in
 | OpenStack CLI Command | MCP Tool | Status | Notes |
 |---------------------|---------|------|------|
 | `openstack quota show` | `get_quota` | ✅ | Quota query |
-| `openstack quota set` | `set_quota` | ✅ | Quota setting |
+| `openstack quota set` | `set_quota` (action="set") | ✅ | Routes supplied fields to Nova/Neutron/Cinder; partial failures are reported |
+| `openstack quota delete` | `set_quota` (action="delete") | ✅ | Resets all three service quotas to defaults; requires modification tools |
 | `openstack usage show` | `get_usage_statistics` | ✅ | Current-project Nova simple tenant usage; not monetary charges |
 | `openstack limits show` | `get_quota` (includes limits) | ✅ | Limits query |
 | Resource allocations | `get_resource_monitoring` | ✅ | Flavor allocations; not CPU load or resident memory samples |
@@ -626,6 +663,51 @@ Add to your Claude Desktop configuration:
 
 ---
 
+## Claude Code Integration
+
+Install Claude Code and start the MCP server in `streamable-http` mode first.
+Register the MCP server's `/mcp` URL, not the MCPO/OpenAPI proxy URL. The example
+below uses the Docker host port `18005`; replace the host/port for your deployment
+and use HTTPS for remote connections. Registration does not start the server.
+
+For the existing single-account mode with `REMOTE_AUTH_ENABLE=true`, enter the
+server's `REMOTE_SECRET_KEY` without saving its literal value in shell history:
+
+```bash
+read -rsp 'MCP Bearer token: ' OPENSTACK_MCP_TOKEN
+echo
+export OPENSTACK_MCP_TOKEN
+
+claude mcp add-json --scope user openstack-ops '{"type":"http","url":"http://127.0.0.1:18005/mcp","headers":{"Authorization":"Bearer ${OPENSTACK_MCP_TOKEN}"}}'
+claude mcp list
+claude
+```
+
+Keep `OPENSTACK_MCP_TOKEN` exported in the terminal that launches Claude Code.
+`--scope user` saves the registration in your normal user configuration. If server
+authentication is disabled, use this registration command instead:
+
+```bash
+claude mcp add --transport http --scope user openstack-ops http://127.0.0.1:18005/mcp
+```
+
+In Claude Code, check `/mcp` and ask, for example:
+
+```text
+Use openstack-ops to list all instances in the project.
+```
+
+Remove the registration when no longer needed (this does not stop the server):
+
+```bash
+claude mcp remove --scope user openstack-ops
+unset OPENSTACK_MCP_TOKEN
+```
+
+This Bearer configuration uses the server's configured OpenStack account. For
+experimental per-user authentication, see the [phase 1 guide](docs/multi-user-phase1.md).
+See also the [Claude Code MCP documentation](https://code.claude.com/docs/en/mcp).
+
 ## Server Configuration
 
 ### Command Line Options